dsh-unrestricted: A System Prompt Jailbreak Plugin for DeepSeek Harness

What Does It Do?

Unrestricted is a DSH plugin for DeepSeek Harness that injects rules during system prompt assembly to lift the model's refusal limits in reverse engineering, security testing, and sensitive-topic writing. It solves the problem that ad-hoc jailbreak instructions pasted into a conversation are easily overridden by the system prompt and may disturb tool-call formatting. The plugin hooks into the system prompt assembly pipeline, adapts to Standard, PTC, Plan, and Minimal modes separately, and offers a master switch without changing DSH's existing interface layout or tool-call protocol.

Core Features

• System prompt injection: appends guidance to the official persona and inserts a separate rule block, leaving working-directory info, tool definitions, and environment variables untouched.
• Per-mode adaptation: Standard and Cordis keep all native tool definitions, PTC makes scripts inside run_code follow the same output rules, Plan writes no files before approval but allows full technical steps in plan documents, and Minimal preserves sub-agent custom roles and structured output.
• Structured merging with safe fallback: merges idempotently by official prompt section names rather than fragile verbatim hash checks, and falls back to the original prompt with a friendly notice when a custom mode lacks a persona section.
• Instant toggle: the switch state lives in the current profile's config, takes effect from the next request without a restart, and turning it off restores the official prompt with no leftover markers in the session record.
• Prompt preview: the settings card shows the active state of all four modes and lets you expand or copy the final assembled system prompt for each.

How to Use This Plugin?

After enabling it in DSH, confirm both switches are on: open the Plugins page, find the plugin, and turn on its plugin switch, then open its detail page and enable the jailbreak toggle in the mode card. Once active, the model leads with code, analysis steps, patches, or prose instead of disclaimers and pleasantries, with any genuine physical or operational risks noted briefly at the end. To adjust behavior, review each mode's status and final prompt in the settings card and toggle as needed. Note that the system prompt only shifts the model's own tendencies; keyword blocking at an upstream API gateway cannot be bypassed this way, and the plugin does not alter DSH's file sandbox, command approval dialogs, or Plan mode write protection. Maintained by yexi-by under the MIT license, last updated 2026-10-31.

How to Troubleshoot This Plugin?

When an upstream API gateway's keyword filter fires, the request is dropped or returns a 400 error; such gateway-level blocking cannot be bypassed through prompting and must be handled on the gateway side. If a custom mode does not take effect, it usually lacks a persona section, in which case the plugin keeps the original prompt and shows a notice on the settings page; check that mode's prompt structure as indicated.